(进阶)golang+gin+jwt实现用户登录获取token

• 1.获取token

  POST请求参数

  {
      "name":"xj",
      "pwd":"xj123456"
  }
  

  golang api router:

  
  // 获取Token
  router.POST("/api/getToken", service.GetApiTokenService)
  

  service:

  
  //请求参数结构体
  type GetTokenRequestParam struct {
    Name string `json:"Name"`
    Pwd  string `json:"Pwd"`
  }
  
  //自定义密钥
  var tokenApiSecret = "itxj980420"
  //获取token
  func GetTokenService(c *gin.Context) {
    reqModel := GetTokenRequestParam{}
    errByBind := c.Bind(&reqModel)
    if errByBind != nil {
        c.JSON(http.StatusOK, gin.H{
            "code":    http.StatusBadRequest,
            "message": "失败",
            "token":   "",
        })
        return
    }
    //参数非空校验
    if common.IsEmpty(reqModel.Name) || common.IsEmpty(reqModel.Pwd) {
        c.JSON(http.StatusOK, gin.H{
            "code":    http.StatusBadRequest,
            "message": "账号、密码不能为空！！！",
            "token":   "",
        })
        return
    }
    //TODO 添加其他校验如账号密码校验；签名校验等其他自定义参数校验
  
    //jwt token header 法加密
    token := jwt.New(jwt.SigningMethodHS256)
    //jwt claims 载荷
    //jti：该jwt的唯一标识
    //iss：该jwt的签发者
    //iat：该jwt的签发时间
    //aud：该jwt的接收者
    //sub：该jwt的面向的用户
    //nbf：该jwt的生效时间,可不设置,若设置,一定要大于当前Unix UTC,否则token将会延迟生效
    //  exp：该jwt的过期时间 Unix()
    claims := make(jwt.MapClaims)
    claims["jti"] = reqModel.Name + reqModel.Pwd + strconv.Itoa(int(time.Now().Unix()))
    claims["iss"] = "itxj"
    claims["iat"] = time.Now()
    claims["aud"] = reqModel.Name
    claims["sub"] = reqModel.Name
    claims["nbf"] = time.Now().Unix()
    claims["exp"] = time.Now().Add(time.Hour * time.Duration(24)).Unix()
    //Payload载荷
    token.Claims = claims
    //密钥加密
    tokenStr, errBySignToken := token.SignedString([]byte(tokenApiSecret))
      //token 生成失败
    if errBySignToken != nil {
        c.JSON(http.StatusOK, gin.H{
            "code":    http.StatusUnauthorized,
            "message": "Error while signing the token!",
            "token":   "",
        })
        return
    }
    //success
    c.JSON(http.StatusOK, gin.H{
        "code":    http.StatusOK,
        "message": "Success!",
        "token":   tokenStr,
    })
    return
  }
  

• 2.路由中间件校验token

  GET 请求：

  http://ip:port/api/validateToken/:key

  Param： key：载荷中的key

//请求
header 里面
    "Token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJ4aiIsImV4cCI6MTU3Nzg2NjU1NiwiaWF0IjoiMjAxOS0xMi0zMVQxNjoxNTo1NS4zNDUyODkrMDg6MDAiLCJpc3MiOiJpdHhqIiwianRpIjoieGppdHhqMTU3Nzc4MDE1NCIsIm5iZiI6MTU3Nzc4MDE1NSwic3ViIjoieGoifQ.zg0FtD4Ovk0GysPSxn2IZfFkvA6KmqbczDPu9zQDFk4"

gin router api

    router.GET("/api/validateToken/:key", service.ValidateTokenService(), service.TestValidateTokenService)

路由中间件—-：校验token是否有效

//路由中间件校验token
func ValidateTokenService() gin.HandlerFunc {

    return func(c *gin.Context) {

        token, err := request.ParseFromRequest(c.Request, request.AuthorizationHeaderExtractor, func(token *jwt.Token) (i interface{}, e error) {
            return []byte(tokenApiSecret), nil
        })
        if err != nil {
            c.Abort()
            c.JSON(http.StatusOK, gin.H{
                "code":    http.StatusUnauthorized,
                "message": "fail",
                "error":   "Unauthorized!",
            })
            return
        }
        if !token.Valid {
            c.Abort()
            c.JSON(http.StatusOK, gin.H{
                "code":    http.StatusUnauthorized,
                "message": "fail",
                "error":   "An invalid Token!",
            })
            return
        }
        c.Next()
    }
}

service：

//获取token中的账号
func TestValidateTokenService(c *gin.Context) {
    sub := c.Param("key")
    token, _ := GetTokenFromRequest(c)
    claimsVal := GetValueFromTokenClaims(sub, token.Claims)
    c.JSON(http.StatusOK, gin.H{
        "code":      http.StatusOK,
        "message":   "成功",
        "claimsVal": claimsVal,
    })
    return
}

//从请求头中获取token
func GetTokenFromRequest(c *gin.Context) (token *jwt.Token, err error) {
    token, err = request.ParseFromRequest(c.Request, request.AuthorizationHeaderExtractor,
        func(token *jwt.Token) (interface{}, error) {
            return []byte(tokenApiSecret), nil
        })
    return token, err
}

//根据key从载荷中获取数据
func GetValueFromTokenClaims(key string, claims jwt.Claims) string {
    v := reflect.ValueOf(claims)
    if v.Kind() == reflect.Map {
        for _, k := range v.MapKeys() {
            value := v.MapIndex(k)

            if fmt.Sprintf("%s", k.Interface()) == key {
                return fmt.Sprintf("%v", value.Interface())
            }
        }
    }
    return ""
}